Medium severity5.3NVD Advisory· Published Apr 29, 2024· Updated Apr 15, 2026

CVE-2023-50432

Description

simple-dhcp-server through ec976d2 allows remote attackers to cause a denial of service (daemon crash) by sending a DHCP packet without any option fields, which causes free_packet in dhcp_packet.c to dereference a NULL pointer.

Affected products

simple-dhcp-server/simple-dhcp-serverllm-create
Range: <= ec976d2

Patches

Vulnerability mechanics

References

papers.mathyvanhoef.com/esorics2024.pdfnvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000